Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
File:                     vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft (raw, json)
Hash identifier:          8I7Q6H+9FxLGPksDTBKHzpUQdv3vjTQr6bx7uGoRCLw=
Subject key identifier:   29:3F:FF:DD:06:71:68:87:6C:73:DA:D5:4D:08:6F:05:12:49:C7:BD
Authority key identifier: BD:19:9F:36:C3:B2:CB:D1:C2:0A:CD:0C:BF:90:53:C0:04:E5:50:52
Certificate issuer:       /CN=bd199f36c3b2cbd1c20acd0cbf9053c004e55052
Certificate serial:       019F32CC8588B74F710417E98BB2A15C7CFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
Manifest number:          0102
Signing time:             Sun 05 Jul 2026 15:01:31 +0000
Manifest this update:     Sun 05 Jul 2026 15:01:31 +0000
Manifest next update:     Mon 06 Jul 2026 15:01:31 +0000
Files and hashes:         1: JhZMzH9twl8wNkeYev4LG3VPv2I.roa (hash: jdBJTvheHN0jaLshgZDbXGrYMtZxQytteuaj6IybSug=)
                          2: VjQjZjd8u0m638f09ekHhQd_-mM.roa (hash: zTHtgnTnSF7YEYTr+ZUE/h/cmSAdI4ibLvD59NKOvq4=)
                          3: aLIN_Ivl6t0-_yxLs-_sm8ODAaY.roa (hash: EB5XZLXbZe8cIE5ruaV3Aim0QvJLKlyaJyoooR5aR3Y=)
                          4: vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl (hash: iMGm9D9jNlzOp4es51x8xlfJwZup+947OFdZehqDbBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Jul 2026 15:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:32:cc:85:88:b7:4f:71:04:17:e9:8b:b2:a1:5c:7c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd199f36c3b2cbd1c20acd0cbf9053c004e55052
        Validity
            Not Before: Jul  5 15:01:31 2026 GMT
            Not After : Jul  6 15:01:31 2026 GMT
        Subject: CN=293fffdd067168876c73dad54d086f051249c7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:84:96:3f:8a:02:30:86:6b:b4:59:c7:7f:
                    5c:38:a8:58:59:50:38:de:12:4e:ca:a9:04:42:96:
                    59:ee:51:00:72:0d:e7:db:b8:fb:59:aa:be:e6:cf:
                    fb:a2:6f:d9:f5:8d:ae:e4:8d:97:32:35:05:2c:9b:
                    0b:a0:b1:b6:0e:91:3e:ad:71:96:88:06:46:64:e5:
                    eb:13:d3:c7:ef:8b:34:16:fc:90:51:85:c4:d0:f7:
                    63:67:44:c8:57:cf:81:5b:ce:ac:12:ed:25:d8:ce:
                    d6:ba:e0:38:7a:06:78:f0:15:a6:e6:ce:b2:76:ad:
                    39:65:4c:4b:14:f7:1d:6e:b0:df:29:e5:9e:b9:10:
                    1e:88:79:ef:e0:a8:8f:c6:4a:f6:ba:d3:ee:d3:be:
                    23:4e:2f:f8:d0:9a:34:1a:2e:3c:8b:04:52:21:63:
                    36:83:46:d2:40:98:47:69:d7:d2:18:53:7d:c9:83:
                    56:8e:00:2b:77:7f:c6:4f:f4:64:35:0f:58:a9:c2:
                    d4:85:d4:bd:6e:bd:ff:2a:6c:c6:1e:06:03:fd:78:
                    49:78:b1:9f:f6:a5:79:8b:4d:f1:9e:33:90:82:c9:
                    3a:e1:70:ab:bd:e6:ab:77:ed:7f:51:7c:12:45:f9:
                    d0:39:1b:d7:e7:84:86:04:cf:c2:ad:62:a8:d0:85:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3F:FF:DD:06:71:68:87:6C:73:DA:D5:4D:08:6F:05:12:49:C7:BD
            X509v3 Authority Key Identifier:
                keyid:BD:19:9F:36:C3:B2:CB:D1:C2:0A:CD:0C:BF:90:53:C0:04:E5:50:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:64:90:47:76:32:b5:07:3e:ed:36:7c:c8:23:bb:08:13:84:
         0c:88:8a:69:e1:8e:dd:bf:ba:35:21:e3:7b:11:b2:81:f9:4e:
         f3:b3:1b:f9:ec:87:63:58:63:25:d2:70:7c:1b:ca:89:63:65:
         f0:65:aa:b1:ab:9b:a7:8f:ad:fb:e9:3f:ea:9b:3a:9c:e8:3a:
         33:ca:16:c8:0a:57:9e:98:ae:51:09:05:79:60:da:22:31:e1:
         98:f8:c4:2d:14:8f:fe:bc:96:4a:06:7a:dd:23:1d:bd:be:24:
         29:df:55:d3:26:06:f5:1d:ba:0a:e8:44:7a:23:9b:33:d8:c4:
         90:b0:21:ac:21:ae:ed:90:3e:0c:2a:d1:69:12:16:b7:8d:c8:
         d3:9f:ed:8e:6f:2b:c3:0b:ed:79:ce:dd:23:f8:2e:69:94:af:
         b8:2c:0e:93:20:06:db:d1:b1:d6:20:75:0f:83:1d:90:48:f2:
         ed:9a:6a:48:9a:9c:99:9d:96:6b:ad:5e:b4:26:88:49:c2:6f:
         7a:98:c6:71:c5:44:f4:33:cc:f4:59:67:00:d7:d3:9c:ed:65:
         74:21:a3:ba:e8:6b:67:d1:2f:aa:08:c3:c1:04:b0:b8:fb:22:
         fc:68:a8:e9:45:6c:8a:76:40:ae:c8:13:43:f5:5e:01:04:6f:
         85:87:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:55:24 2026 by rpki-client